Bump @tailwindcss/typography from 0.5.15 to 0.5.16 #50
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
dependabot
bot
added
dependencies
Minder Vulnerability Report ✅Minder analyzed this PR and found it does not add any new vulnerable dependencies.
|
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @tailwindcss/typography
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 7.2 |
| Repository activity | 5.2 |
| User activity | 9.2 |
| Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 136 |
| Number of git tags or releases | 28 |
| Versions matched to tags or releases | 27 |
This package has been digitally signed using sigtore.
| Source repository | https://github.com/tailwindlabs/tailwindcss-typography |
| Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
| GitHub action workflow | .github/workflows/release.yml |
| Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=160333538 |
Alternatives
| Package | Score | Description |
|---|---|---|
| @tailwindcss/forms | 0 | |
| @tailwindcss/aspect-ratio | 0 |
Pull Request Test Coverage Report for Build 12791977239Details
💛 - Coveralls |
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/tailwindcss/typography-0.5.16
branch
from
bfff5c5 to
490109f
Compare
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @tailwindcss/typography
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 7.2 |
| Repository activity | 5.2 |
| User activity | 9.2 |
| Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 136 |
| Number of git tags or releases | 28 |
| Versions matched to tags or releases | 27 |
This package has been digitally signed using sigtore.
| Source repository | https://github.com/tailwindlabs/tailwindcss-typography |
| Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
| GitHub action workflow | .github/workflows/release.yml |
| Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=160333538 |
Alternatives
| Package | Score | Description |
|---|---|---|
| @tailwindcss/forms | 0 | |
| @tailwindcss/aspect-ratio | 0 |
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/tailwindcss/typography-0.5.16
branch
from
490109f to
e92bb72
Compare
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @tailwindcss/typography
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 7.2 |
| Repository activity | 5.2 |
| User activity | 9.2 |
| Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 136 |
| Number of git tags or releases | 28 |
| Versions matched to tags or releases | 27 |
This package has been digitally signed using sigtore.
| Source repository | https://github.com/tailwindlabs/tailwindcss-typography |
| Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
| GitHub action workflow | .github/workflows/release.yml |
| Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=160333538 |
Alternatives
| Package | Score | Description |
|---|---|---|
| @tailwindcss/forms | 0 | |
| @tailwindcss/aspect-ratio | 0 |
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/tailwindcss/typography-0.5.16
branch
from
e92bb72 to
f959396
Compare
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @tailwindcss/typography
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 7.2 |
| Repository activity | 5.2 |
| User activity | 9.2 |
| Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 136 |
| Number of git tags or releases | 28 |
| Versions matched to tags or releases | 27 |
This package has been digitally signed using sigtore.
| Source repository | https://github.com/tailwindlabs/tailwindcss-typography |
| Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
| GitHub action workflow | .github/workflows/release.yml |
| Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=160333538 |
Alternatives
| Package | Score | Description |
|---|---|---|
| @tailwindcss/forms | 0 | |
| @tailwindcss/aspect-ratio | 0 |
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/tailwindcss/typography-0.5.16
branch
from
f959396 to
0de78dc
Compare
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @tailwindcss/typography
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 7.2 |
| Repository activity | 5.2 |
| User activity | 9.2 |
| Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 136 |
| Number of git tags or releases | 28 |
| Versions matched to tags or releases | 27 |
This package has been digitally signed using sigtore.
| Source repository | https://github.com/tailwindlabs/tailwindcss-typography |
| Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
| GitHub action workflow | .github/workflows/release.yml |
| Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=160333538 |
Alternatives
| Package | Score | Description |
|---|---|---|
| @tailwindcss/forms | 0 | |
| @tailwindcss/aspect-ratio | 0 |
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/tailwindcss/typography-0.5.16
branch
from
0de78dc to
90a98c7
Compare
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @tailwindcss/typography
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 7.2 |
| Repository activity | 5.2 |
| User activity | 9.2 |
| Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 136 |
| Number of git tags or releases | 28 |
| Versions matched to tags or releases | 27 |
This package has been digitally signed using sigtore.
| Source repository | https://github.com/tailwindlabs/tailwindcss-typography |
| Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
| GitHub action workflow | .github/workflows/release.yml |
| Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=160333538 |
Alternatives
| Package | Score | Description |
|---|---|---|
| @tailwindcss/forms | 0 | |
| @tailwindcss/aspect-ratio | 0 |
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/tailwindcss/typography-0.5.16
branch
from
90a98c7 to
cfd353c
Compare
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @tailwindcss/typography
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 7.2 |
| Repository activity | 5.2 |
| User activity | 9.2 |
| Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 136 |
| Number of git tags or releases | 28 |
| Versions matched to tags or releases | 27 |
This package has been digitally signed using sigtore.
| Source repository | https://github.com/tailwindlabs/tailwindcss-typography |
| Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
| GitHub action workflow | .github/workflows/release.yml |
| Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=160333538 |
Alternatives
| Package | Score | Description |
|---|---|---|
| @tailwindcss/forms | 0 | |
| @tailwindcss/aspect-ratio | 0 |
Bumps [@tailwindcss/typography](https://github.com/tailwindlabs/tailwindcss-typography) from 0.5.15 to 0.5.16. - [Release notes](https://github.com/tailwindlabs/tailwindcss-typography/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss-typography/blob/main/CHANGELOG.md) - [Commits](tailwindlabs/tailwindcss-typography@v0.5.15...v0.5.16) --- updated-dependencies: - dependency-name: "@tailwindcss/typography" dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/tailwindcss/typography-0.5.16
branch
from
cfd353c to
bb214a8
Compare
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: @tailwindcss/typography
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 7.2 |
| Repository activity | 5.2 |
| User activity | 9.2 |
| Provenance | verified_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 136 |
| Number of git tags or releases | 28 |
| Versions matched to tags or releases | 27 |
This package has been digitally signed using sigtore.
| Source repository | https://github.com/tailwindlabs/tailwindcss-typography |
| Cerificate Issuer | CN=sigstore-intermediate,O=sigstore.dev |
| GitHub action workflow | .github/workflows/release.yml |
| Rekor (public ledger) entry | https://search.sigstore.dev/?logIndex=160333538 |
Alternatives
| Package | Score | Description |
|---|---|---|
| @tailwindcss/forms | 0 | |
| @tailwindcss/aspect-ratio | 0 |
alex-mcgovern
deleted the
dependabot/npm_and_yarn/tailwindcss/typography-0.5.16
branch
Bumps @tailwindcss/typography from 0.5.15 to 0.5.16.
Release notes
Sourced from
@tailwindcss/typography's releases.Changelog
Sourced from
@tailwindcss/typography's changelog.Commits
39d20e10.5.1625b0f9eUpdate peer dependency version to include 4.0.0-beta.1 (#365)383bee7Clean up extra spread array (#362)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)